Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fRPr85Nn8xjfHEFZ_xnxhBZzECI.roa
File: fRPr85Nn8xjfHEFZ_xnxhBZzECI.roa (raw, json)
Hash identifier: ebhdUUR0Rs/4n+cNYVOqKyKhplJSAerSpbpJoP9VZT8=
Subject key identifier: 7D:13:EB:F3:93:67:F3:18:DF:1C:41:59:FF:19:F1:84:16:73:10:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018722BDCB8298D866B2AF74CDDF8A112CA3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fRPr85Nn8xjfHEFZ_xnxhBZzECI.roa
Signing time: Mon 27 Mar 2023 11:04:36 +0000
ROA not before: Mon 27 Mar 2023 11:04:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:22bd:6fbb/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:bd:cb:82:98:d8:66:b2:af:74:cd:df:8a:11:2c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 11:04:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d13ebf39367f318df1c4159ff19f18416731022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7e:f6:51:45:e7:9e:00:0a:79:89:ce:7b:2b:
a7:80:90:00:19:a1:47:f5:20:d8:4b:66:a6:1b:79:
79:fb:51:28:51:ac:2e:48:9b:1d:a1:33:c3:d9:d2:
d6:cd:f3:e2:ee:5c:e3:c4:ae:4b:3f:88:ec:49:61:
de:90:11:68:7f:78:75:d0:54:66:7c:02:b8:e3:3c:
b0:b3:05:83:08:f9:5d:f4:60:32:fd:75:94:d9:ab:
37:a9:46:97:27:2f:50:95:48:dd:1e:80:39:c3:5b:
cc:3d:ea:dd:d1:e0:bd:44:ff:c1:e5:0c:1c:f1:cb:
64:51:b7:22:2d:12:8e:e1:28:60:fc:d8:17:f0:0c:
5b:0e:ba:55:f9:eb:4b:c4:57:02:67:a8:23:1f:9d:
9e:cb:89:1f:2a:7a:84:9a:c6:f5:c0:3b:d5:70:e5:
da:a9:ef:4d:b5:6e:8b:47:dd:a4:44:96:d6:c8:58:
22:84:c4:de:3a:f7:b6:fe:49:df:5f:b7:f7:84:f0:
9f:92:45:c7:93:84:dc:64:b1:c8:31:0e:74:19:62:
b5:4b:83:58:25:cd:54:b1:bd:c1:e1:67:f4:60:2e:
82:88:53:fb:91:6c:a7:52:f4:c9:8a:11:26:e9:65:
ec:ba:de:a9:9d:8f:2e:c2:cf:fd:60:ac:95:aa:ef:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:13:EB:F3:93:67:F3:18:DF:1C:41:59:FF:19:F1:84:16:73:10:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fRPr85Nn8xjfHEFZ_xnxhBZzECI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:d3:b5:a8:77:11:fe:ee:1c:e9:94:3b:c0:d7:37:a3:68:25:
52:f7:5b:29:a8:12:f7:07:3f:53:e3:0f:2f:32:8e:b2:5a:ab:
cf:4b:5b:00:3f:e3:ce:5d:68:40:da:10:12:a5:b7:e1:71:66:
c2:6c:85:82:f8:ca:1c:fc:d8:fe:01:ef:f8:3d:ce:92:2e:d3:
cb:ea:6f:cc:b9:c0:e1:3c:82:57:5f:4c:91:0c:39:d6:65:ca:
e8:b6:eb:25:0c:04:f6:7b:6c:f6:c9:27:ab:6e:c7:43:aa:bc:
bd:5d:d3:6f:93:f0:4e:ca:19:ef:9e:b1:52:7e:88:33:d3:1e:
8c:d2:f4:28:92:e8:6b:8b:5a:c2:91:b4:a8:bd:77:cd:4a:7e:
69:71:e3:0b:06:7e:d7:28:5e:bb:2b:2a:22:d1:8d:77:12:ac:
a6:c8:13:27:17:50:c2:06:92:e2:65:f1:71:94:1d:8d:4d:55:
31:7b:6c:99:e1:8e:a3:48:33:ee:4a:1d:53:59:64:4e:f8:f6:
64:b8:79:1b:e4:6c:0f:1a:d6:25:91:70:c6:89:72:54:7e:8a:
e4:bf:92:88:77:4a:6b:5a:07:f8:4b:c4:2a:9d:d9:f4:ff:bf:
77:66:7f:e1:42:4c:63:e4:a4:24:78:b4:89:ed:35:60:e4:01:
9d:e4:f6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:57:13 2025 by rpki-client